Warning: Slop Squatting Directs AI Users to Phishing Pages
KnowBe4, Monday, September 14th, 2026
Attackers register domains matching hallucinated URLs that AI assistants invent, then host phishing pages there.
KnowBe4 describes slop squatting, in which attackers register domains and package names that AI assistants commonly hallucinate when answering user queries.
Because the model confidently returns a plausible but nonexistent URL, an attacker who registers it captures traffic from trusting users.
The post explains how this differs from classic typosquatting and why chatbot output carries extra perceived authority. Verification of AI-supplied links is the core recommendation.